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Formula storage unit 




Lattice constant GL 


2.12 






Decryption time evaluation formula EF 


log(T)=0.04N-6.2 










Lattice constant GL 


3.5 






Decryption time evaluation formula EF 


log(T)=0.08N-4.8 










Lattice constant GL 
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Decryption time evaluation formula EF 


log(T)=0.13N-4.4 








| Conditional expression ED 
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| Initial security determination formula IF 


log(T>0\2002N-18.884 { 







(57) Abstract: A parameter generation apparatus for generating parameters causing no decryption errorTor an NTRU cryptosystem 
so that an encrypted communication can be carried out between an encryption apparatus and a decryption apparatus in a secure and 
reliable manner, is comprised of: a provisional parameter generation unit operable to generate a set of provisional parameters that do 
not cause any decryption errors, based on error condition information that is provided in advance, said error condition information 
indicating a condiiion for causing no decryption error; and an output parameter generation unit operable to generate an output param- 
eter that does not cause any decryption errors, using said set of provisional parameters, based on a lattice constant that is calculated 
from said set of provisional parameters. 
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